Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
File:                     454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa (raw, json)
Hash identifier:          XAvbkALbmLetUek4o5FW/+4KCAySsd/sKZyTwAtONz4=
Subject key identifier:   CD:65:F1:2C:9C:0E:3B:25:3C:CD:1C:31:74:AD:DE:EB:96:D6:D9:C1
Certificate issuer:       /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial:       010D0C9F43285849C0A4D4AD8F7201FC3F823B60
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     28086
IP address blocks:        209.213.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d4:ad:8f:72:01:fc:3f:82:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=5f8e4df6-3162-4888-ad7e-71bf19ba65ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:1a:b6:b1:43:60:df:64:d6:b0:35:26:24:
                    ef:18:3c:f7:bc:0f:b4:f7:da:48:37:44:41:a1:89:
                    ff:d5:a9:4a:d7:82:ea:d1:b0:bd:e3:45:41:aa:d6:
                    5b:4e:a6:4c:fc:89:ef:bd:7f:81:4c:8e:09:eb:9c:
                    71:f2:ea:53:c3:07:49:1a:59:e4:45:77:f0:63:00:
                    47:3a:cb:05:0f:47:a2:c6:4f:a1:57:15:11:f3:af:
                    9d:f9:86:b0:79:75:58:81:c9:22:e7:de:21:dc:41:
                    be:07:2d:e6:8b:8e:e2:b3:15:3a:4a:3b:7b:09:dd:
                    46:f8:7d:15:25:cc:13:91:d1:d7:db:db:a5:14:f2:
                    70:bb:3c:f2:43:8f:1a:8b:b7:c1:23:81:bc:0c:42:
                    67:7b:3e:bc:51:00:3c:96:ee:83:d6:61:06:ae:b1:
                    7d:fb:c1:09:ef:12:b6:16:5e:f7:dc:1a:78:40:c9:
                    f2:0b:80:04:f4:de:a3:57:87:39:c9:14:a9:66:0c:
                    3b:4c:19:4b:3c:f5:d9:96:a8:c3:97:08:31:f9:b5:
                    61:3e:4b:71:ab:c3:f9:0c:ea:9e:09:90:2f:ec:46:
                    ce:ce:f4:3a:f8:da:d1:c8:cc:c4:b2:cf:25:db:91:
                    b1:97:8e:ca:a5:c4:8b:b0:9b:2a:48:c1:ec:1d:08:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:F1:2C:9C:0E:3B:25:3C:CD:1C:31:74:AD:DE:EB:96:D6:D9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/454f86c6-ec6d-31f6-b62b-0a3bc736fd17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl

            X509v3 Authority Key Identifier:
                keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:45:eb:3d:ca:c9:0f:79:21:82:9e:e3:5e:9c:38:93:6a:81:
         cd:8a:3a:11:2c:50:80:11:de:89:22:3b:04:58:74:46:20:89:
         70:d8:39:dc:02:a2:74:18:19:6a:4b:81:bf:39:c4:5d:44:26:
         23:cf:20:5a:38:dc:97:25:1c:5b:f6:b6:1e:ea:9a:f1:0d:d2:
         e7:63:72:ba:b1:69:bc:36:c7:1b:e6:c4:87:c6:66:be:ed:bc:
         c3:e5:a5:5e:04:86:60:4e:b1:e2:7d:70:58:02:79:26:0b:d7:
         1d:0a:8b:8f:db:d4:c5:a4:65:41:b8:52:25:23:8d:10:58:14:
         53:63:20:35:02:5e:c5:66:06:ac:f9:9c:69:48:24:e6:65:ca:
         f5:84:dc:c8:d6:0b:6b:3e:5f:e7:22:cc:f4:31:a1:6d:61:0d:
         2a:fb:08:dc:05:d1:97:bf:c3:32:3c:8d:2f:23:38:07:87:f2:
         99:d2:4f:90:04:88:14:39:9b:df:18:2a:dd:5e:b8:34:86:57:
         11:21:77:d1:5a:cc:88:33:05:e8:f5:8b:ee:2d:49:97:18:10:
         7f:97:6b:5f:86:a1:92:67:9a:bc:ed:03:24:c1:ab:ba:63:23:
         ef:f9:11:12:94:85:3f:fc:24:c7:8a:fe:24:fa:a2:bd:d6:5e:
         b7:76:34:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNStj3IB/D+CO2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAyMDE4ZDYtNTQxNC00ODg5LWI2NzktNTNmZjZhOWU1
Njg1MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
NWY4ZTRkZjYtMzE2Mi00ODg4LWFkN2UtNzFiZjE5YmE2NWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs4atrFDYN9k1rA1JiTvGDz3vA+099pIN0RB
oYn/1alK14Lq0bC940VBqtZbTqZM/InvvX+BTI4J65xx8upTwwdJGlnkRXfwYwBH
OssFD0eixk+hVxUR86+d+YaweXVYgcki594h3EG+By3mi47isxU6Sjt7Cd1G+H0V
JcwTkdHX29ulFPJwuzzyQ48ai7fBI4G8DEJnez68UQA8lu6D1mEGrrF9+8EJ7xK2
Fl733Bp4QMnyC4AE9N6jV4c5yRSpZgw7TBlLPPXZlqjDlwgx+bVhPktxq8P5DOqe
CZAv7EbOzvQ6+NrRyMzEss8l25Gxl47KpcSLsJsqSMHsHQiq5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1l8SycDjslPM0cMXSt3uuW1tnBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIw
MThkNi01NDE0LTQ4ODktYjY3OS01M2ZmNmE5ZTU2ODUvNDU0Zjg2YzYtZWM2ZC0z
MWY2LWI2MmItMGEzYmM3MzZmZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTAyMDE4ZDYtNTQxNC00ODg5LWI2
NzktNTNmZjZhOWU1Njg1LzUwMjAxOGQ2LTU0MTQtNDg4OS1iNjc5LTUzZmY2YTll
NTY4NS5jcmwwHwYDVR0jBBgwFoAU+WuL7LyEht6T63skHtJKMM1MTUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDIwMThkNi01NDE0LTQ4ODktYjY3OS01M2Zm
NmE5ZTU2ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0dWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVF6z3KyQ95IYKe416cOJNqgc2KOhEsUIAR3okiOwRYdEYgiXDYOdwC
onQYGWpLgb85xF1EJiPPIFo43JclHFv2th7qmvEN0udjcrqxabw2xxvmxIfGZr7t
vMPlpV4EhmBOseJ9cFgCeSYL1x0Ki4/b1MWkZUG4UiUjjRBYFFNjIDUCXsVmBqz5
nGlIJOZlyvWE3MjWC2s+X+cizPQxoW1hDSr7CNwF0Ze/wzI8jS8jOAeH8pnST5AE
iBQ5m98YKt1euDSGVxEhd9FazIgzBej1i+4tSZcYEH+Xa1+GoZJnmrztAyTBq7pj
I+/5ERKUhT/8JMeK/iT6or3WXrd2NLI=
-----END CERTIFICATE-----
Generated at Tue May 13 06:56:22 2025 by rpki-client